Vulnerability Risk Lead for IT Security & DevOps

ING Nederland; Amsterdam; Hybrid; EUR 80,000 - 110,000; Full time

Benefits offered by this job

25-28 vacation days

Pension scheme

13th month salary

8% Holiday payment

Hybrid working

Personal growth opportunities

Informal working environment

Job summary

ING Nederland in Amsterdam seeks a Vulnerability Management Specialist to oversee the end-to-end vulnerability lifecycle, validate security designs, and guide DevOps teams to mitigate risks.

You will work in the IAM & Resilience chapter within the RIRS Tribe, collaborating with CISO, 2LoD, and DevOps to translate risks into concrete actions.

The role requires hands-on experience with VM tools and risk governance; hybrid working and strong growth opportunities are offered.

Qualifications

• End-to-end vulnerability management lifecycle expertise.
• Vulnerability identification, analysis and remediation.
• Experience with scanning and management tools (Nessus, Qualys, Tenable, Rapid7) and CVSS.
• VM risk metrics and risk governance frameworks.
• Familiarity with VM processes in regulated environments.
• Excellent stakeholder management and communication.
• Certs such as CISSP, OSCP, GCIH are an advantage.

Responsibilities

• Perform validation/triage, risk scoring, remediation tracking, and verification.
• Use CVSS, threat intel, asset criticality, exposure, and compensating controls to drive risk-based remediation.
• Orchestration Remediation: coordinate owners and ensure fix validation.
• Continuous improvement: reduce noise, tune scans, improve coverage, drive automation.
• Monitor the risk score and keep the entity within Risk Appetite.
• Participate in the Risk Opinion process for Vulnerability Management.
• Review VM metrics and manage remediation of issues.

Skills

Vulnerability management

Vulnerability analysis

Vulnerability remediation

CVSS & risk scoring

Stakeholder management

Security tooling

Education

CISSP

OSCP

GCIH

Tools

GSOC

ServiceNow

Checkmarx

Qualys

Nessus

Tenable

Rapid7

Cloud Atlas

APF

Job description

ING Nederland in Amsterdam seeks a Vulnerability Management Specialist to oversee the end-to-end vulnerability lifecycle, validate security designs, and guide DevOps teams to mitigate risks.

You will work in the IAM & Resilience chapter within the RIRS Tribe, collaborating with CISO, 2LoD, and DevOps to translate risks into concrete actions.

The role requires hands-on experience with VM tools and risk governance; hybrid working and strong growth opportunities are offered.